Yes, Marcus Ranum teaches log analysis. You can frequently catch him at USENIX, SANS, or Interop/Comdex (scheduled appearances are listed below). Or email him for more information or to book a private tutorial for your organization!!
SANS New Orleans, La
Tuesday,Nov 2, System Log Aggregation and Analysis Hands-On Honeypots (2 day) Hands-On
USENIX LISA '04 Atlanta, Georgia
Monday November 15th System Log Analysis, Collection, and Statistics
SANS Olando, Jan 2005
Thursday Jan 3, 2005 System Log Aggregation and Analysis Hands-On